https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 00:29:26 +0000 https://cve.radiocsirt.org/vuln/cve-2021-24307 <p><strong>Affected:</strong> All in One SEO Team All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings</p> <p>The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with &#34;aioseo_tools_settings&#34; privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin&#39;s configuration by uploading a backup .ini file in the section &#34;Tool &gt; Import/Export&#34;. However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.</p> <p><strong>Affected:</strong> All in One SEO Team All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings</p> <p>The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with &#34;aioseo_tools_settings&#34; privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin&#39;s configuration by uploading a backup .ini file in the section &#34;Tool &gt; Import/Export&#34;. However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.</p> https://cve.radiocsirt.org/vuln/cve-2021-24307